While these may be valid goals, you need to consider the inherent costs of each position. For example, if your internal team indicates that it is important for them to verify final travel reports within five business days of the visit, this may not be the SOP schedule for the service provider. Therefore, your internal team needs to define the appropriate expected service levels and see how those expectations are consistent with the service provider`s capabilities. My Data Trust Data Protection Service Provider (GDPR) for the Life Science industry Data protection is now just a matter of compliance or security. This has become a strategic topic at the board level since significant changes in European Union legislation were announced (new GDPR). . . .